1server: 2 verbosity: 7 3 use-syslog: no 4 directory: "" 5 pidfile: "unbound.pid" 6 chroot: "" 7 username: "" 8 do-not-query-localhost: no 9 use-caps-for-id: no 10 define-tag: "one two refuse" 11 12# Interface configuration for IPv4 13 interface: @IPV4_ADDR@@@PORT_ALLOW@ 14 interface: @IPV4_ADDR@@@PORT_DENY@ 15 interface: @IPV4_ADDR@@@PORT_REFUSE@ 16 interface: @IPV4_ADDR@@@PORT_TAG_1@ 17 interface: @IPV4_ADDR@@@PORT_TAG_2@ 18 interface: @IPV4_ADDR@@@PORT_TAG_3@ 19 interface: @IPV4_ADDR@@@PORT_VIEW_INT@ 20 interface: @IPV4_ADDR@@@PORT_VIEW_EXT@ 21 interface: @IPV4_ADDR@@@PORT_VIEW_INTEXT@ 22 23 interface-action: @IPV4_ADDR@@@PORT_ALLOW@ allow 24 interface-action: @IPV4_ADDR@@@PORT_DENY@ deny 25 # interface-action: @IPV4_ADDR@@@PORT_REFUSE@ refuse # This is the default action 26 interface-action: @IPV4_ADDR@@@PORT_TAG_1@ allow 27 interface-action: @IPV4_ADDR@@@PORT_TAG_2@ allow 28 interface-action: @IPV4_ADDR@@@PORT_TAG_3@ allow 29 interface-action: @IPV4_ADDR@@@PORT_VIEW_INT@ allow 30 interface-action: @IPV4_ADDR@@@PORT_VIEW_EXT@ allow 31 interface-action: @IPV4_ADDR@@@PORT_VIEW_INTEXT@ allow 32 33 interface-tag: @IPV4_ADDR@@@PORT_TAG_1@ "one" 34 interface-tag: @IPV4_ADDR@@@PORT_TAG_2@ "two" 35 interface-tag: @IPV4_ADDR@@@PORT_TAG_3@ "refuse" 36 interface-tag-action: @IPV4_ADDR@@@PORT_TAG_1@ one redirect 37 interface-tag-data: @IPV4_ADDR@@@PORT_TAG_1@ one "A 1.1.1.1" 38 interface-tag-action: @IPV4_ADDR@@@PORT_TAG_2@ two redirect 39 interface-tag-data: @IPV4_ADDR@@@PORT_TAG_2@ two "A 2.2.2.2" 40 interface-tag-action: @IPV4_ADDR@@@PORT_TAG_3@ refuse always_refuse 41 42 interface-view: @IPV4_ADDR@@@PORT_VIEW_INT@ "int" 43 interface-view: @IPV4_ADDR@@@PORT_VIEW_EXT@ "ext" 44 interface-view: @IPV4_ADDR@@@PORT_VIEW_INTEXT@ "intext" 45 46# Mirrored interface configuration for IPv6 47 interface: @IPV6_ADDR@@@PORT_ALLOW@ 48 interface: @IPV6_ADDR@@@PORT_DENY@ 49 interface: @IPV6_ADDR@@@PORT_REFUSE@ 50 interface: @IPV6_ADDR@@@PORT_TAG_1@ 51 interface: @IPV6_ADDR@@@PORT_TAG_2@ 52 interface: @IPV6_ADDR@@@PORT_TAG_3@ 53 interface: @IPV6_ADDR@@@PORT_VIEW_INT@ 54 interface: @IPV6_ADDR@@@PORT_VIEW_EXT@ 55 interface: @IPV6_ADDR@@@PORT_VIEW_INTEXT@ 56 57 interface-action: @IPV6_ADDR@@@PORT_ALLOW@ allow 58 interface-action: @IPV6_ADDR@@@PORT_DENY@ deny 59 # interface-action: @IPV6_ADDR@@@PORT_REFUSE@ refuse # This is the default action 60 interface-action: @IPV6_ADDR@@@PORT_TAG_1@ allow 61 interface-action: @IPV6_ADDR@@@PORT_TAG_2@ allow 62 interface-action: @IPV6_ADDR@@@PORT_TAG_3@ allow 63 interface-action: @IPV6_ADDR@@@PORT_VIEW_INT@ allow 64 interface-action: @IPV6_ADDR@@@PORT_VIEW_EXT@ allow 65 interface-action: @IPV6_ADDR@@@PORT_VIEW_INTEXT@ allow 66 67 interface-tag: @IPV6_ADDR@@@PORT_TAG_1@ "one" 68 interface-tag: @IPV6_ADDR@@@PORT_TAG_2@ "two" 69 interface-tag: @IPV6_ADDR@@@PORT_TAG_3@ "refuse" 70 interface-tag-action: @IPV6_ADDR@@@PORT_TAG_1@ one redirect 71 interface-tag-data: @IPV6_ADDR@@@PORT_TAG_1@ one "A 1.1.1.1" 72 interface-tag-action: @IPV6_ADDR@@@PORT_TAG_2@ two redirect 73 interface-tag-data: @IPV6_ADDR@@@PORT_TAG_2@ two "A 2.2.2.2" 74 interface-tag-action: @IPV6_ADDR@@@PORT_TAG_3@ refuse always_refuse 75 76 interface-view: @IPV6_ADDR@@@PORT_VIEW_INT@ "int" 77 interface-view: @IPV6_ADDR@@@PORT_VIEW_EXT@ "ext" 78 interface-view: @IPV6_ADDR@@@PORT_VIEW_INTEXT@ "intext" 79 80# Mirrored interface configuration for interface name 81 interface: @INTERFACE@@@PORT_ALLOW@ 82 interface: @INTERFACE@@@PORT_DENY@ 83 interface: @INTERFACE@@@PORT_REFUSE@ 84 interface: @INTERFACE@@@PORT_TAG_1@ 85 interface: @INTERFACE@@@PORT_TAG_2@ 86 interface: @INTERFACE@@@PORT_TAG_3@ 87 interface: @INTERFACE@@@PORT_VIEW_INT@ 88 interface: @INTERFACE@@@PORT_VIEW_EXT@ 89 interface: @INTERFACE@@@PORT_VIEW_INTEXT@ 90 91 interface-action: @INTERFACE@@@PORT_ALLOW@ allow 92 interface-action: @INTERFACE@@@PORT_DENY@ deny 93 # interface-action: @INTERFACE@@@PORT_REFUSE@ refuse # This is the default action 94 interface-action: @INTERFACE@@@PORT_TAG_1@ allow 95 interface-action: @INTERFACE@@@PORT_TAG_2@ allow 96 interface-action: @INTERFACE@@@PORT_TAG_3@ allow 97 interface-action: @INTERFACE@@@PORT_VIEW_INT@ allow 98 interface-action: @INTERFACE@@@PORT_VIEW_EXT@ allow 99 interface-action: @INTERFACE@@@PORT_VIEW_INTEXT@ allow 100 101 interface-tag: @INTERFACE@@@PORT_TAG_1@ "one" 102 interface-tag: @INTERFACE@@@PORT_TAG_2@ "two" 103 interface-tag: @INTERFACE@@@PORT_TAG_3@ "refuse" 104 interface-tag-action: @INTERFACE@@@PORT_TAG_1@ one redirect 105 interface-tag-data: @INTERFACE@@@PORT_TAG_1@ one "A 1.1.1.1" 106 interface-tag-action: @INTERFACE@@@PORT_TAG_2@ two redirect 107 interface-tag-data: @INTERFACE@@@PORT_TAG_2@ two "A 2.2.2.2" 108 interface-tag-action: @INTERFACE@@@PORT_TAG_3@ refuse always_refuse 109 110 interface-view: @INTERFACE@@@PORT_VIEW_INT@ "int" 111 interface-view: @INTERFACE@@@PORT_VIEW_EXT@ "ext" 112 interface-view: @INTERFACE@@@PORT_VIEW_INTEXT@ "intext" 113 114# Local zones configuration 115 local-zone: local. transparent 116 local-data: "local. A 0.0.0.0" 117 local-zone-tag: local. "one two refuse" 118 119# Views configuration 120view: 121 name: "int" 122 view-first: yes 123 local-zone: "." refuse 124 local-zone: "internal" transparent 125view: 126 name: "ext" 127 view-first: yes 128 local-zone: "internal" refuse 129view: 130 name: "intext" 131 view-first: yes 132 133# Stubs configuration 134forward-zone: 135 name: "." 136 forward-addr: @IPV4_ADDR@@@FORWARD_PORT@ 137 138stub-zone: 139 name: "internal" 140 stub-addr: @IPV4_ADDR@@@STUB_PORT@ 141